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REAL TIME DEBUGGER INTERFACE FOR EMBEDDED SYSTEMS 



is^a^lication is a continuation of U.S. Serial No. 
09/064,474, filed AprTT^22T-~*9£8-^^ hereby incorporated by 

5 reference herein in its entirety . 
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BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

The invention relates to systems and methods for debugging 
software in real time. More particularly, the invention relates 
to systems and methods for the real time debugging of firmware in 
embedded systems, e.g. ASIC chips having one or more processors on 
a single chip. 

2. State of the Art 

Software debugging may be accomplished in a number of ways, 
some of which are not performed in real time. A traditional 
debugging technique is to step through program instructions at a 
rate much slower than the rate at which the program is designed to 
run in real time. By stepping through the program instructions 
one-by-one, errors can be observed as they happen and the program 
code lines executed immediately prior to the error can be analyzed 
to find the cause of the error. This technique is not helpful, 
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1 however, if the error in program execution is the result of timing 

2 errors or other types of errors which only occur when the program 

3 is running at real time speed. As used herein, the term "real 

4 time" means the rate at which a 1 program must execute in order to 

5 process the incoming data rate which may be quite high. 
6 

7 A widely used technique for debugging a program which is 

8 running in real time is called "tracing". Tracing involves • 

9 recording the transactions performed by the computer as it 

(tp executes the program code. The trace of activities performed by 

if}1 the computer during the time of a failure can be a useful guide in 

iV2 isolating possible causes of the failure. 

If 3 

Another useful debugging tool is to set breakpoints at 

!rp selected places in the program. The breakpoints trap the flow of 

W6 the software and provide insight into whether, when, and how 

u 

|C7 certain portions of the software are entered and exited. An 



1 8 analysis of the flow of the software can provide information which 

19 is useful in isolating bugs . 

20 

21 Many state-of-the-art tracing and trapping methods are 

22 accomplished by a debug support circuit which is connected to the 

23 system bus, i.e. the bus which couples the CPU to memory. See, 

24 for example, U.S. Patent Number 5,491,793 to Somasundaram et al. 
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1 entitled "Debug Support in a Processor Chip." Connecting a debug 

2 circuit to the system bus is convenient because addresses, 

3 instructions, and data can be accessed via the system bus. 

4 However, coupling the debug support circuit to the system bus 

5 increases the electrical load on the bus and interferes with the 

6 operation of the bus. Moreover, operation of the system bus may 

7 interfere with operation of the debug support circuit. In 

8 addition, the system bus may not provide all the information 

9 necessary for debugging a program running on a CPU which uses 

|H) internal cache. These CPUs will not access the system bus if the 

JRI information they need is available in cache. If an error occurs 

\2 

jV2 while the CPU is accessing internal cache, the debug support 

IL3 circuit will not be able to access the information it needs. 

ft 

3 

|H5 Another tracing and trapping method is disclosed in U.S. 

W6 Patent Number 5,833,310 to Whistel et al. entitled "On-Chip In- 

137 Circuit-Emulator Memory Mapping and Breakpoint Register Modules." 

lea-. 

1 8 According to this method, an internal bus controller is coupled to 

19 the memory address bus and a match register. When a memory 

20 address written to the address bus matches an address in the match 

21 register, a memory mapping module maps a memory cycle to an 

22 external debug memory. The user can set specific bus event 

23 conditions for which memory is mapped by writing to a set of 

24 breakpoint registers. A disadvantage of this method is that it 
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1 , requires an additional set of I/O pins for the chip so that the 

2 external debug memory can be coupled to the chip. This may 

3 require a significant number of pins since the addresses to be 

4 mapped may be 32 or 64 bits wide. 
5 

6 Still another tracing and trapping method is disclosed in 

7 U.S. Patent Number 5,513,346 to Satagopan et al. entitled "Error 

8 Condition Detector for Handling Interrupt in Integrated Circuits 

9 Having Multiple Processors." According to this method, an 
13) interrupt processor controller intercepts all interrupts and 

1gl routes them to the appropriate processor in a multiprocessor chip. 

It 

The interrupt processor controller includes logic which determines 

jlP when an interrupt will cause an error because a previously 

¥h instigated interrupt has not been cleared. When such an error is 

detected, a bit is set in an error detect register, the bit 

Ifp corresponding to an interprocessor interrupt channel. The bits in 

1^ the register are ORed and a single bit output indicates the 

18 occurrence of an error. The register may then be examined to 

1 9 determine the location of the interrupt error in the executing 

20 code. This method does not interfere with the system bus and does 

21 not require very many additional pins on the chip. However, the 

22 debugging information that it provides is limited. 
23 
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1 The Motorola MPC-860 PowerQuicc™ includes a program 

2 development system interface port which provides a three bit 

3 output indicative of the state of the program execution as the 

4 program is being executed. The* MPC-860 is a 40 mHz communications 

5 controller but the development system interface port is only 

6 operable at a rate of 4 mHz. Thus, the port can not be used for 

7 real time debugging. The specifications for the MPC-860 are found 

8 in the "MPC-860 POWERQUICC USER'S MANUAL", Copyright 1996 - 

9 Motorola, Inc., Schaumberg, IL, the complete disclosure of which 
|H) is incorporated herein by reference. 

I 

jy2 ASIC design using one or more embedded processors poses 

additional debugging challenges. The prior art methods of 

uL . . .... 

r4 trapping instructions at a given point in time implies that the 

H5 system must be stopped to allow debugging of firmware. Once the 

Wd system is stopped, however, real time events and their timing 

lea? 

127 relationships are lost. If there is a firmware bug which is only 

1 8 identifiable in the presence of live traffic (during real time 

1 9 operations) it is necessary to obtain contextual information about 

20 the error before the firmware is changed. 
21 

22 
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1 SUMMARY OF THE INVENTION 

2 

3 It is therefore an object of the invention to provide a 

4 debugging interface for tracing instructions without loss of real 

5 time context and event interaction. 
6 

7 It is also an object of the invention to provide a debugging 

8 interface which does not interfere with the operation of a- 

9 processor or system bus. 

mo 

*1I1 It is another object of the invention to provide a debugging 

\%2 interface which does not require many additional pins on a 

|1j3 processor chip. 

hi 

n. 

; ;T3 It is a further object of the invention to provide a 

jt!6 debugging interface which provides access to a substantial amount 

p7 of information about the executed instructions. 

If. 

18 

19 In accord with these objects which will be discussed in 

20 detail below, the debugging interface of the present invention 

21 includes a first decoder coupled to the sequencer of a processor 

22 and to the Instruction RAM (IRAM) of the processor. The first 

23 decoder, according to the invention, provides a real time three 

24 bit output on a cycle by cycle basis which is indicative of the 
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1 processor activity during the last clock cycle. According to a 

2 presently preferred embodiment, the three bit output indicates 

3 seven different conditions regarding processor activity. In 

4 particular, the three bit output indicates whether or not a new 

5 instruction has been executed since the last clock cycle, and if a 

6 new instruction has been executed, whether the last., instruction 

7 executed by the processor was an immediate jump, a jump to 

8 register, or a branch taken. In addition, the three bit output 

9 will indicate whether execution of the instruction resulted in an 
WO exception. By recording this three bit output over time, and 

*tl1 comparing it to the actual instructions listed in the program 

* - 

!tl2 code, important debugging information is obtained about a program 

ftj3 which was running in real time. 

ia 

13 

;fj5 According to a preferred embodiment of the invention, a 

jC6 second decoder and an event history buffer are coupled to the 

jt?7 cause register of the sequencer of the processor. In particular, 

1 8 the second decoder is coupled to the enable input of the history 

1 9 buffer and the cause register is coupled to the data input of the 

20 history buffer. The second decoder decodes the contents of the 

21 cause register and enables the history buffer whenever the 

22 contents of the cause register indicates an exception, a jump 

23 register instruction, or a change in the status of an interrupt 

24 line. Whenever the history buffer is enabled, information from 
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1 the cause register and the program counter is loaded into the 

2 buffer. By recording the contents of the history buffer over 

3 time, and comparing the information to the actual program code, 

4 additional important debugging information is obtained about a 

5 program which was running in real time. According to this 

6 preferred embodiment of the invention, the seventh condition 

7 indicated by the three bit output of the first decoder is whether 

8 an exception was encountered without writing to the history 

9 buffer. 

;C1 According to the presently preferred embodiment, each entry 

|iB2 in the event history buffer is forty- four bits. Each forty-four 

fU3 bit entry in the history buffer includes the current sixteen bit 

jl 4 time stamp, twenty three bits from certain fields of the cause 

C§5 register or program counter, one bit indicating whether the entry 

hi 

jtj6 is related to a jump or an exception, two bits identifying the 

|r7 processor number (in a multiprocessor system) , one bit identifying 

1 8 whether the history buffer has overflowed, and a time stamp 

19 rollover bit. The history buffer preferably has a depth of at 

20 least sixteen entries. 
21 

22 An exemplary implementation of the debugging interface is 

23 embodied on an ASIC chip having three processors. Each processor 

24 is provided with two decoders as described above and a single 
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1 event history buffer is provided on the chip. Nine pins on the 

2 chip are used to provide access to the three bit outputs of each 



4 (data, clock, and enable) to the contents of the event history 

5 buffer. These twelve pins on the chip allow a diagnostic device 

6 to be coupled to the chip during real time operations without 

7 interfering with the operation of the chip. The outputs of the 

8 first decoders and the contents of the event history buffer can be 

9 recorded over time by the diagnostic device to provide a real time 
record of the processing events occurring in the chip during real 

131 time. This real time record taken together with knowledge of the 

ff32 program code being executed provides a true picture of the 

[tj3 processors 1 execution sequence in real time and thereby expedite 

5 1 4 debugging of code. 



3 first decoder. Three pins on the chip provide serial access 




20 



21 
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1 BRIEF DESCRIPTION OF THE DRAWINGS 

2 

3 Figure 1 (represented as Figs. 1A and IB on two separate 

4 sheets) is a schematic block diagram of an exemplary 

5 implementation of a real time debugger interface according to the 

6 invention; and 
7 

8 Figure 2 is a schematic block diagram of a debugging system 

9 coupled to a chip embodying a real time debugger interface 
13 

1SD according to the invention. 

*G 

"M 

m 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

ill 

w 

^ Referring now to Figures 1, an exemplary ASIC chip 10 

\3 incorporating a debugger interface according to the invention 

*jl> includes three processors 12a, 12b, 12c, sharing a common clock 16 

^7 via a clock bus 17. Each processor includes an instruction RAM 

18 (IRAM) 18a, 18b, 18c, an arithmetic logic unit (ALU) 20a, 20b, 

19 20c, and a "sequencer" 22a, 22b, 22c. Each sequencer includes a 

20 program counter 24a, 24b, 24c and a cause register 26a, 26b, 26c. 

21 Each program counter contains an index of the instructions in an 

22 associated IRAM and a pointer to the index as the instructions are 

23 executed by the processor. The cause registers store current 

24 information about interrupts, exceptions, and other processor 

25 functions. 
26 
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1 According to one aspect of the invention, a first decoder 

2 28a, 28b, 28c is coupled to each I RAM 18a, 18b, 18c, and to each 

3 sequencer 22a, 22b, 22c, i.e., to each program counter and each 

4 cause register. Each first decoder has a three bit output 30a, 

5 30b, 30c which is available off the chip 10 via three pins (0, 1, 

6 2) in real time. 
7 

8 As mentioned above, the three bit output of each firs-t 

9 decoder 28 provides an indication of the processor activity during 
|J!0 the last clock cycle. Thus, the decoder 28 is arranged to 

indicate whether the program counter has moved its pointer to a 

jl 

jj|2 new instruction. The decoder also decodes the instruction in the 

|l§3 IRAM to provide information about the instruction, and decodes the 

14 

T4 contents of the cause register to provide an indication of an 

!r £ 5 exception encountered during the execution of an instruction. 

jf*6 According to a presently preferred embodiment, the first decoder 

HP7 28 generates a three bit output which is interpreted as shown in 

18 Table 1, below. 
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Output 


Mnemonic 


Description 


000 


NC 


No Change 


001 


INC 


* Program Counter Increment 


010 


JI 


Program Counter Jump Immediate 


Oil 


JR 


Program Counter Jump Register 


100 


ECP 


Exception Encountered - 


101 


PBT 


Program Counter Branch Taken 


110 


RSD 


Reserved 


111 


ENH 


Exception Encountered, No History Buffer 
Entry Written 



Table 1 



The output 000 indicates that there has been no change in the 
processor since the last clock cycle; i.e., the processor has not 
processed a new instruction and the program counter pointer has 
not changed. The output 001 indicates that the processor has 
processed the next instruction in the program; i.e., the program 
counter pointer has incremented to the next instruction in the 
index. The output 010 indicates that the last instruction 
processed by the processor was a "hard coded" jump to an 
instruction; i.e., the instruction in I RAM pointed to by the 
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1 program counter includes code indicating that it is a jump 

2 instruction to an absolute address in the program. The output Oil 

3 indicates that the last instruction processed by the processor was 

4 a jump to an instruction based on the contents of a register; 

5 i.e., the instruction in I RAM pointed to by the program counter 

6 includes code indicating that it is a jump instruction to a 

7 location in the program determined by the value of a. variable. 

8 The output 100 indicates that since the last clock cycle the 

9 processor has encountered an interrupt or an exception; i.e., the 
WO contents of the cause register contain code which indicates an 
$11 interrupt or exception. The output 101 indicates that the last 
$12 instruction processed by the processor was a pc branch taken; 

ilj3 i.e., the instruction in I RAM pointed to by the program counter 

.1 4 includes code indicating that it is a branch back to another 

i « 

it]5 instruction. The output 110 is not presently used, but is 

jfij6 reserved for future use. The output 111 indicates that since the 

|§7 last clock cycle the processor has encountered an interrupt or an 

1 8 exception; and that no entry was made in the history buffer 

19 

20 The operation of the first decoder 28 and its output is 

21 illustrated with reference to a simple code listing which is shown 

22 below in Table 2. 
23 
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LINE NUMBER 


INSTRUCTION 


10 


Input A 


20 


B=5 


30 


C=2 


40 


D=B+C 


50 


If D=7 then Goto 70 


60 


Goto A* 10 


70 


B=4 


80 


Goto 30 


90 


End 



, 1 Table 2 

j£p The listing in Table 2 has one "immediate" or "hard coded" 

i ^ 

jump instruction at line 80 and a conditional branch at line 50. 

5 It also has one jump instruction, line 60, based on the contents 

6 of a register, i.e. the value of A which is input at line 10. The 

7 three bit output of the first decoder during execution of the 

8 instructions shown in Table 2 is illustrated in Table 3 below 

9 where the values of variables A, B, C, and D are also shown. 
10 

1 1 
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Current 
Line 


Next 
Line 


A 


B 


C 


D 


Mnemonic 


Three Bit 
Output 


i n 


on 
zU 


•-> 


*? 


*? 




INC 


001 


on 


jU 




c 
D 




*? 


INC 


001 


jU 


ah 


*p 


b 


2 




INC 


001 


ah 


jU 


*p 


b 


2 


7 


INC 


001 


en 

jU 


/U 




5 


2 


7 


PBT 


101 


/U 


oO 


*P 


4 


2 


7 


INC 


.101 


80 


30 




4 


2 


7 


JI 


010 


30 


40 


? 


4 


2 


7 


INC 


001 

\J \J J_ 


40 


50 




4 


2 


6 


INC 


001 


50 


60 


? 


4 


2 


6 


INC 


001 


60 


•? 




4 


2 


6 


JR 


011 



Table 3 

!| 

j;^ When the first instruction (listed in line 10) is executed, 

jjjl the first decoder indicates that a program counter increment (INC) 

5 in the execution of the program has occurred and shows an output 

6 of "001". As the program progresses from the instruction on line 

7 10 through the instruction on line 40, the first decoder continues 

8 to indicate that a program counter increment (INC) in the 

9 execution of the program has occurred and continues to show an 

10 output of "001". When the instruction on line 50 is executed, the 

1 1 first decoder indicates that a program counter branch taken (PBT) 
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1 has occurred and shows an output of "101". As seen in Tables 2 

2 and 3, the program branches to line 70 because the conditional 

3 expression of line 50 is true based on the variable D=7. Upon 

4 execution of line 70, the first* decoder indicates that a program 

5 counter increment (INC) in the execution of the program has 

6 occurred and shows an output of "001". When the instruction on 

7 line 80 is executed, the first decoder indicates that an immediate 

8 jump (JI) has occurred and shows an output of "010". As seen in 

9 Tables 2 and 3, the program jumps to line 30. When the 

13) instructions on lines 30 and 40 are executed, the first decoder 

Ifl indicates that a program counter increment (INC) in the execution 

1;if> of the program has occurred and shows an output of "001". When 

[3 line 50 is executed (now for the second time) the first decoder 

Us 

i% indicates that a program counter increment (INC) in the execution 

{% of the program has occurred and shows an output of "001" because 

* i - 

1;B the condition (D=7) for the jump in line 50 is no longer valid. 

1<? Line 60 is now executed and a jump to a location stored in a 

18 register occurs. The first decoder therefore indicates a jump to 

19 register (JR) by showing an output of "011". 
20 

21 Referring once again to Figure 1, according to another aspect 

22 of the invention, each cause register 26a, 26b, 26c is coupled to 

23 the data input D of an event history buffer 14 and a second 

24 decoder 32a, 32b, 32c is coupled to each cause register and to the 
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1 enable input E of the history buffer 14 . The clock 16 provides 

2 the common clock signal to the clock input C of the history buffer 

3 14 via the clock bus 17, and a timestamp register 19 is also 

4 coupled to the clock bus 17. The contents of the history buffer 

5 14 are made available off chip by three pins for the data, clock, 

6 and enable (D, C, E) of the history buffer 14. According to this 

7 aspect of the invention, when certain conditions are detected by 

8 one of the second decoders 32, the history buffer is enabled via 

9 the appropriate decoder, and information from the cause register, 
j%0 the timestamp register, and the program counter is stored in the 
!Ml history buffer. More particularly, the second decoder 32 enables 

'Sec 

jt2 the history buffer whenever the first decoder contains code which 

S3 indicates that the processor is processing an instruction to jump 

^4 to a location stored in a register, whenever the first decoder 

i 

P5 contains code indicating an exception was encountered, and 

W5 whenever the first decoder contains code indicating a change in 

fQ7 state of an interrupt line. 

i r 

18 

19 According to a presently preferred embodiment, when the 

20 history buffer is enabled, it captures forty-four bits of 

21 information from the cause register or program counter, and the 

22 timestamp register. The forty- four bits of information are 

23 preferably organized as illustrated in Table 4 below. 
24 
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43 


42 


41 


40 - 18 


17 


16 


15-0 


Mode 


Pro 


c 


Cause/ PC 


HOVRF 


TR 


Time Stamp 



-| Table, 4 

2 

3 The first bit, bit location 43, is a mode identifier 

4 indicating whether the entry being stored has program counter 

5 information or cause register information. A two bit processor 

6 identification number is stored in binary form at bit locations 
n7 42, 41. This number is used to indicate which processor's 

!|B information is being stored (in the case of a multiprocessor 

jjs system) . The next twenty-three bits at bit locations 40 through 

\fJ0 18 are used to store cause register information or program counter 

¥l information depending on the mode as explained above. If program 

^¥2 counter information is being stored, the contents of the program 

W3 counter are stored at bit locations 40 through 18. If cause 

104 register information is being stored, bit location 40 is used to 

1 5 indicate whether the exception occurred while the processor was 

16 executing an instruction in the branch delay slot. (This applies 

17 to pipelined processors such as RISC processors.) Bit locations 

18 39 through 35 are used to store processor related exception 

19 conditions. Bit locations 34 through 18 are used to store an 

20 indication of all pending interrupts (external, software, co- 

21 processor. The HOVRF field at bit location 17 is used to indicate 
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1 whether the internal event history buffer has overflowed. The TR 

2 bit 16 is used to indicate a timestamp rollover and bits 15 

3 through 0 are used to store a sixteen bit timestamp. According to 

4 the presently preferred embodiment, the forty- four bits captured 

5 in the history buffer 14 are serially output on data pin D over 

6 forty-four clock cycles (bit serial output) . 
7 

8 As mentioned above, the event history buffer records - 

9 information when an event (either an unmasked exception or a PC 

13) jump register instruction) has occurred. According to a presently 

$yt preferred embodiment, this requires an additional mask register 

|d> per cause register and a free running timestamp counter. The 

jjj3 event masks are provided by a JTAG test register load instruction 

f% in the static debug interface. When the cause register bits 

x 

t|> corresponding to an exception are unmasked or a PC jump register 

1^ instruction is encountered, an entry is made in the history 

\ ^ 

ff buffer. 

I s * 

18 

1 9 Those skilled in the art will appreciate that the outputs of 

20 the first decoder 28 and the contents of the history buffer 14 

21 provide a relatively complete indication of each processor's 

22 execution sequence in real time, particularly when viewed in light 

23 of the actual program code which is being executed. Therefore, 
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1 according to the invention, a debugging system may be coupled to 

2 the first decoders and history buffer as illustrated in Figure 2. 
3 

4 Turning now to Figure 2, the outputs 30a, 30b, 30c of the 

5 first decoders and the D,C,E terminals of the history buffer are 

6 coupled to a debugging computer 44 which preferably has a copy of 

7 the program code stored therein. The three-bit outputs 30a, 30b, 

8 30c of the first decoders and the D,C,E terminals of the history 

9 buffer are preferably coupled to an interface buffer 40 which is 
13) coupled by a serial, parallel, or network connection 42 to the 

10 debugging computer 44. The interface buffer 40 is a rate 

I- 

112 decoupling buffer. In a present embodiment of the invention, the 

V§ debugger interface is provided on a 100 MHz three processor 

{% system. In that system, the data rate for reading the event 

1|B history buffer is approximately 1 gigabit/sec. Current PCs cannot 

'jft keep up with that data rate. Therefore, the buffer 40 is provided 

^7 to prevent the loss of event history data. 

18 

19 As the program is running on the ASIC 10, the debugging 

20 computer 44 collects information from the first decoders and the 

21 history buffer. The information collected by the computer 44 is 

22 associated with each line of code being executed by the ASIC by 

23 stepping through the copy of the code which is stored in the 

24 computer 44. When a bug is encountered, the complete history of 
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1 instruction execution leading up to the failure can be reviewed 

2 with the computer. 44. The debugging system is non- invasive and 

3 permits debugging of programs operating in real time. 

5 There have been described and illustrated herein embodiments 

6 of a real time debugger interface for embedded systems. While 

7 particular embodiments of the invention have been described, it is 

8 not intended that the invention be limited thereto, as it is 

9 intended that the invention be as broad in scope as the art will 
ICO allow and that the specification be read likewise. Thus, while 
it|1 particular encoding schemes have been disclosed with reference to 
|t|2 the first decoder output and the history buffer contents, it will 
jip be appreciated that other encoding schemes could be utilized 

^4 provided that they achieve substantially the same results as 

jtjS described herein. Also, while the invention has been illustrated 

•66 with reference to a three-processor ASIC chip, it will be 

p7 recognized that the invention may be applied in other types of 

18 chips having greater or fewer processors. Moreover, while 

1 9 particular configurations have been disclosed in reference to the 

20 indications provided by the first decoders, it will be appreciated 

21 that other configurations could be used as well, provided that 

22 they achieve substantially the same results as described herein. 

23 It will therefore be appreciated by those skilled in the art that 
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1 yet other modifications could be made to the provided invention 

2 without deviating from its spirit and scope as so claimed. 
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